May 24, 2023 Privacy and Data Our Ethos We take our responsibility to safeguard customers’ data very seriously. We only collect the data necessary to provide and support the services we offer. We do not, and will never, sell our customers' data. If you have any questions or concerns about how we protect your data, please don't hesitate to reach out. Connecting Telegram with 3RM When you connect your Telegram account with 3RM, our system receives a session access token, giving it access to interact with and retrieve data from your Telegram account. The Telegram session token is encrypted at rest and in transit. It is only decrypted in- process to establish a connection to Telegram to sync your chats. This means that even if 3RM has a data breach, attackers cannot access your Telegram. 3RM’s connection with Telegram is not open, and exists only when we are updating your Telegram data in 3RM. What 3RM can access, and what it stores Telegram's API does not support scoped access, meaning that by connecting with your Telegram account, our system gains access to all chats and messages. However, the system only imports metadata for chats that you choose to sync. We are investigating cutting-edge techniques such as encrypted data streaming and decentralized vaults to limit our system's access beyond what Telegram's API supports. Chats you chose not to sync are not stored by 3RM in any way. For those chats you have chosen to sync, our system stores the following necessary data £ The chat nameμ £ The last message timestam ̈ £ The first name, last name, and username for all chat participantμ £ Telegram's internal chat I £ Telegram's internal chat participant ID for all chat participants Your first name, last name, and username from your Telegram account are all also stored to create your profile - these can only be seen by colleagues in your 3RM workspace. This data is needed by our system to correctly sync chats or chat participants information if and when the information is updated. An update could be a name change on a chat, a name change of a participant or someone leaving/ joining a chat etc. We do not currently store message content, but may provide users the option to opt in to services that use this data in the future – for example, an AI-summarized chat history. How we use data We don’t, and will never, sell your data. We only share your data with third-party analytics tools, such as Amplitude, which we use internally to help us run our service. We have strict internal controls to prevent unauthorized access to personally identifiable information. For more details, read our privacy policy here But can you prove it? We’re staunch supporters of the philosophy “Don’t trust, verify”. However, Telegram’s all-or-nothing access controls makes this difficult to do. As mentioned above, we are exploring cutting-edge techniques such as encrypted data streaming and decentralized vaults to limit our system's access to your data in a verifiable way. Please direct any further questions to our joint Telegram chat. Privacy Policy T&Cs